IP Phones are discovered through a supported Cisco switch or router that manages those phones using Cisco Unified Call Manager Express. 


Phones are not discoverable by directly scanning their IP, instead you should scan the CME host device.